Privacy Policy

Arte Clinic (hereinafter "the Clinic") places great importance on protecting your personal information and complies with the Personal Information Protection Act of Korea.
Through this Privacy Policy, the Clinic informs you of the purposes and methods for which the personal information you provide is used, and of the measures taken to protect it.
This Privacy Policy is organized as follows.

1. Personal information collected and method of collection
2. Purpose of collection and use of personal information
3. Retention and use period of personal information
4. Procedure and method of destroying personal information
5. Provision and sharing of personal information
6. Outsourcing of personal information processing
7. Rights of users and legal representatives and how to exercise them
8. Withdrawal of consent / membership cancellation
9. Installation, operation and refusal of automatic personal information collection devices
10. Personal information manager
11. Measures to ensure the security of personal information
12. Duty to notify policy changes

1. Personal information collected and method of collection

The Clinic collects only the minimum personal information required to use its services when you sign up as a member.
Membership registration includes required and optional items. You may use the services without restriction even if you do not provide optional items such as consent to receive emails.
a. [Medical information] - Items collected: name, date of birth, address, contact details, medical records
※ Under the Medical Service Act, the Clinic is required to retain unique identification information and medical information (separate consent is not required).
b. [Items collected when signing up on the website]
- Required items: name, ID, password, address, contact details (telephone number, mobile phone number), email address
- Optional items: birthday, consent to receive text messages, consent to receive emails, areas of interest
- The following information may be automatically generated and collected while you use the services or while services are being provided: service usage records, access logs, cookies, access IP information
c. [Method of collecting personal information] - Personal information is collected through the following methods.
･ Website, written forms, fax, telephone, consultation board, email

2. Purpose of collection and use of personal information

The Clinic uses the personal information it collects for the following purposes.
All information provided by users will not be used for any purpose other than those stated below, and prior consent will be obtained if the purpose of use changes.
a. [Medical information] - Providing medical services for diagnosis and treatment, and administrative services such as billing, payment and refunds
b. [Website member information]
- Required information: treatment reservations and reservation inquiries through the website, provision of membership services, and posting on online boards (1:1 consultation / private consultation / post-procedure consultation / reviews, etc.)
- Optional information: Clinic news and health information via email, surveys, troubleshooting and personalized services for individual members, collection of statistics on service use, and other notices about new services and information. However, sensitive personal information that may infringe on users' basic human rights is not collected.
Within the above scope, the Clinic collects additional information provided voluntarily by users in order to offer richer services.

3. Retention and use period of personal information

The Clinic destroys your personal information without delay once the purpose of collection or provision has been achieved.
a. [Medical information] - Retained in accordance with the medical record retention standards set out in the Medical Service Act
b. [Website member information]
- Until you cancel your membership or are removed as a member. However, even after the purpose of collection or provision has been achieved, the Clinic may retain your personal information where it must be preserved under the Commercial Act or other laws and regulations.
- Records of consumer complaints or dispute resolution: 3 years (Act on the Consumer Protection in Electronic Commerce, etc.)
- Records of the collection, processing and use of credit information: 3 years (Credit Information Use and Protection Act)
– Records of identity verification: 6 months (Act on Promotion of Information and Communications Network Utilization and Information Protection, etc.)
– Records of visits: 3 months (Protection of Communications Secrets Act)

4. Procedure and method of destroying personal information

The Clinic destroys personal information immediately once the "purpose of collection and use of personal information" has been achieved. The procedure and method of destruction are as follows.
a. [Destruction procedure] Information entered by users for membership registration, etc. is destroyed immediately using the destruction methods below once the purpose has been achieved.
b. [Destruction method] Personal information stored in electronic files is deleted using technical methods that make the records impossible to restore.
Personal information printed on paper is destroyed by shredding or incineration.

5. Provision and sharing of personal information

Except with your consent or as required by relevant laws and regulations, the Clinic will under no circumstances use your personal information beyond the scope notified in the "purpose of collection and use of personal information," or provide it to other persons, companies or institutions.
- Submission of medical records to the Health Insurance Review and Assessment Service for claims of medical care benefit costs under the National Health Insurance Act
- Provision in a form that does not identify any specific individual where necessary for statistics or academic research
- Submission upon request by investigative agencies in accordance with the procedures and methods prescribed by law, etc.

6. Outsourcing of personal information processing

To provide its services, the Clinic outsources the processing of personal information as follows, and in accordance with relevant laws, specifies the necessary terms in outsourcing contracts so that personal information is managed safely.
The Clinic's outsourcing contractor and the details of the outsourced work are as follows.
Contractor: WAVECODE Co., Ltd.
Outsourced work: website maintenance, access log management, member management
Personal information entrusted: name, address, telephone number
Retention and use period: until the end of the outsourcing contract

7. Rights of users and legal representatives and how to exercise them

Membership registration for children under the age of 14 (hereinafter "children") is carried out through a separate form written in plain language that is easy for children to understand, and the consent of a legal representative is always obtained when collecting personal information.
To obtain the consent of the legal representative, the Clinic collects the minimum information from the child, such as the legal representative's name and contact details, and obtains the legal representative's consent in the manner set out in this Privacy Policy.
A child's legal representative may request to view, correct or delete the child's personal information. To view, correct or delete a child's personal information, the legal representative may click "Edit Member Information," complete the legal representative verification process and then view, correct or delete the information directly, or contact the personal information protection manager in writing, by telephone or by fax, and the necessary measures will be taken.
The Clinic does not provide or share information about children with third parties. If a legal representative requests correction of an error in personal information collected from a child, the Clinic will not use or provide that personal information until the error has been corrected.
※ Personal information that must be retained by law cannot be modified or deleted during the retention period, even upon request.

8. Withdrawal of consent / membership cancellation

You may withdraw at any time the consent you gave at registration to the collection, use and provision of your personal information. To cancel your membership, click "Cancel Membership" on My Page of the Clinic's website and submit the request yourself; the personal information manager will confirm the request and the cancellation will be completed within 10 days of the request date. Alternatively, if you contact the personal information manager in writing, by telephone or by fax, the Clinic will take the necessary measures without delay, such as destroying your personal information.

9. Installation, operation and refusal of automatic personal information collection devices

The Clinic uses "cookies," which store and retrieve your information from time to time. A cookie is a very small text file that the server used to operate the Clinic's website sends to your browser, and it is stored on your computer's hard disk. The Clinic uses cookies for the following purposes.
You have a choice regarding the installation of cookies. By setting options in your web browser, you can accept all cookies, be asked for confirmation each time a cookie is stored, or refuse to store any cookies.
If you refuse the installation of cookies, some services may be difficult to provide.

10. Personal information manager

To protect your personal information and handle complaints related to personal information, the Clinic has designated a personal information manager as follows.
Name: DR. SEO JUNGSONG
Position: Representative Director
Organization: Arte Clinic
Contact: +82-52-257-3375
You may report any complaints related to personal information protection that arise while using the Clinic's services to the personal information manager.
The Clinic will respond promptly and fully to users' reports.
If you need to report or consult about other infringements of personal information, please contact the following organizations.
･ Personal Information Dispute Mediation Committee (http://www.1336.or.kr / 1336)
･ Information Protection Mark Certification Committee (http://www.eprivacy.or.kr / (02) 580-0533~4)
･ Supreme Prosecutors' Office Cyber Crime Investigation Unit (http://www.spo.go.kr / (02) 3480-3573)
･ Korean National Police Agency Cyber Terror Response Center ( http://www.ctrc.go.kr / (02) 392-0330)

11. Measures to ensure the security of personal information

In handling users' personal information, the Clinic takes the following technical and administrative measures to ensure that personal information is not lost, stolen, leaked, altered or damaged.
a. [Password encryption] Passwords set at registration are encrypted when stored and managed, so only you know your password, and only you, as the person who knows the password, can view and change your personal information. However, if a member asks the personal information protection manager to make changes directly due to difficulties in use, the information can be changed after identity verification in writing, by telephone, fax, email, etc.
b. [Measures against hacking, etc.] The Clinic does its best to prevent members' personal information from being leaked or damaged by hacking, computer viruses, etc.
The Clinic regularly backs up data in case of damage to personal information, uses up-to-date antivirus programs to prevent users' personal information or data from being leaked or damaged, stores users' important personal information (such as resident registration numbers) in encrypted form, and uses encrypted communication so that personal information can be transmitted safely over the network. In addition, the Clinic uses an intrusion prevention system to control unauthorized access from outside and strives to put in place every possible technical means to secure the system.
c. [Minimizing and training staff who handle personal information] Staff handling personal information at the Clinic are limited to the persons in charge, who are given separate passwords that are updated regularly, and the persons in charge receive regular and ad hoc training.
However, the Clinic accepts no responsibility for problems arising from the leakage of personal information such as telephone numbers, passwords or resident registration numbers due to the user's own negligence or problems on the internet.

12. Duty to notify policy changes

This Privacy Policy was revised on the date stated below. If any content is added, deleted or modified due to changes in laws, policies or security technology, the Clinic will announce the reasons for and details of the changes on its website at least 7 days before the revised Privacy Policy takes effect.

･ Effective date: December 1, 2024